How to Block Wi-Fi Access for a Single Device: All Methods

Have you noticed someone has connected to your Wi-Fi network without permission? Or do you want to restrict internet access for a specific device (for example, a child's tablet at night)? Blocking a device from the local network is a challenge many users face. Fortunately, modern routers offer several ways to solve this problem without complex intervention.

In this article we will look at 5 proven methodsHow to block Wi-Fi access for one device: from the standard MAC filtering Before using the provider's mobile apps, you'll learn what settings need to be changed in the router's admin panel and how to find them. MAC address a blocked gadget and what to do if the device continues to connect despite all efforts. We'll separately cover the nuances for popular router models— TP-Link, ASUS, Keenetic And Xiaomi.

Important: Blocking via a router only works within your local network. If your device connects to the internet via a mobile network (4G/5G), these methods will not work. Also, some smart gadgets (e.g., Amazon Echo or Google Nest) can change automatically MAC address at each connection - they will require additional measures.

1. MAC address blocking: a universal method

The most reliable way to block Wi-Fi access is to use MAC filteringEach device has a unique MAC address (For example, 00:1A:2B:3C:4D:5E), which can be added to the router's blacklist. This method works on 99% of models, including obsolete ones.

To find MAC address target device:

• 📱 On Android: go to Settings → About phone → General information → Wi-Fi MAC address
• 🍎 On iPhone/iPad: Settings → General → About → Wi-Fi Address
• 💻 On Windows: open command prompt and type

  ipconfig /all

  , find the line "Physical Address"
• 🖥️ On MacOS: System Preferences → Network → Advanced → Ethernet/Wi-Fi → MAC Address

Once the address is found, follow these steps (instructions for TP-Link Archer C6, for other models the path may differ):

Find the MAC address of the target device

Log into your router's admin panel (usually 192.168.0.1 or 192.168.1.1)

Go to Wireless → MAC Filtering

Add an address to the blacklist

Save settings and reboot the router-->

⚠️ Attention: Some devices (especially new ones) iPhone And Android 10+) are used MAC address randomization to protect your privacy. In this case, MAC blocking may not work; you'll need to use the other methods in this article.

2. Using parental controls

If you want to do more than just lock your device, limit his access time to the Internet (for example, for children's gadgets), use the function parental controlThis method is available on most modern routers and allows you to:

• 🕒 Set an access schedule (for example, only from 9:00 to 21:00)
• 📱 Block specific websites or apps
• 📈 Limit internet speed for a device

Example setup for ASUS RT-AX88U:

1. Go to the admin panel (192.168.1.1)
2. Let's move on to Adaptive QoS → Parental Control
3. Select a device from the list of connected ones
4. Set time or content limits
5. Save the settings

On routers Keenetic the path will be different: Internet → Parental Controls → Access RulesHere you can create a separate rule for each device, specifying the days of the week and blocking times. For example, you can prevent your child from using the phone after 10:00 PM on weekdays.

3. Blocking via the provider's app

Many internet service providers (eg. Rostelecom, Beeline, MTS) offer their own mobile apps for managing the router. These often feature one-click device blocking, eliminating the need to access the admin panel.

Here's how it works in an example app Rostelecom — Personal Account:

1. Open the app and log in
2. Go to the section My Devices → Wi-Fi
3. Find the device you want to block in the list.
4. Click on it and select Block access

The advantages of this method:

• ⚡ Fast - blocking takes less than a minute
• 📱 Convenient – ​​you can control it from your phone from anywhere in the house
• 🔄 Flexible - easy to unlock your devicelater

⚠️ Attention: If you rent a router from a provider, some features (eg. MAC filtering) may be disabled in the firmware. In this case, use the provider's app or contact technical support to unlock advanced settings.

4. Changing the Wi-Fi password: a radical solution

If other methods have failed (for example, due to randomization MAC addresses), the most reliable way is change your Wi-Fi passwordThis will disconnect from the network. all devices, including yours, so the method is only suitable in extreme cases.

How to change your password (instructions for TP-Link):

1. Go to the admin panel (192.168.0.1)
2. Let's move on to Wireless → Wireless Security
3. In the field Wi-Fi password enter a new password (at least 8 characters, with numbers and letters)
4. Save the settings

After changing your password, you'll need to reconnect all your devices. To avoid forgetting your new password, write it down in a safe place (for example, in a password manager). KeePass or 1Password).

What should you do if you forgot your router admin panel password?

If you don’t remember the login/password to enter the router settings (usually this is admin/admin (or indicated on the device sticker), perform a factory reset:

1. Find the button on the back of the router Reset (small hole).

2. Press and hold it for 10-15 seconds using a paper clip or toothpick.

3. After rebooting the router, use the standard login details (indicated on the sticker).

⚠️ Warning: Resetting will delete all settings, including your Wi-Fi password!

5. Creating a separate guest network

If you want to restrict access for some devices, but not block them completely, you can use guest networkThis is a separate Wi-Fi network with its own name (SSID) and a password that:

• 🔒 Doesn't have access to local devices (printers, network drives)
• 🕒 May have a time or speed limit
• 📡 Easily disabled without affecting the main network

Setting up a guest network on ASUS RT-AC68U:

1. Go to the admin panel
2. Let's move on to Wireless Network → Guest Network
3. We enable the guest network and give it a name (for example, Guest_WiFi)
4. Set a password and restrictions (if necessary)
5. Save the settings

Now connect the devices you want to restrict to the guest network. If necessary, you can completely disable the guest network without affecting the main network.

6. Advanced methods: IP and DHCP blocking

For advanced users, there are two more ways to lock your device:

1. Blocking by IP address

If the device always receives the same IP address on your network (for example, 192.168.1.100), it can be blocked through firewall router. On Keenetic it's done like this:

1. Let's go in Security → Firewall
2. Create a new rule with an action Drop (reject)
3. We indicate IP address devices in the field Source
4. We save the rule

2. Binding MAC to IP via DHCP

This method prevents the device from receiving IP addresses from the router. On TP-Link:

1. Let's go to DHCP → Address Reservation
2. Adding MAC address device and assign it a non-existent IP (For example, 192.168.1.254)
3. Save the settings

⚠️ Attention: These methods require an understanding of network settings. Incorrect firewall configuration can block internet access for all devices on the network. If you are not sure, use the simpler methods from the previous sections.

Common problems and solutions

Even after being blocked, your device may still connect to Wi-Fi. Let's look at common causes and troubleshooting steps:

If none of the methods worked, there may be a problem with the router firmware. Update it to the latest version using the section System Tools → Firmware Update (the path may differ depending on the model).

For diagnostics, you can also use specialized applications:

• 🔍 Fing (scans the network and shows all connected devices)
• 🛡️ GlassWire (monitors network activity in real time)
• 📊 WiFi Analyzer (helps find the optimal channel for your router)

FAQ: Answers to Frequently Asked Questions

Is it possible to block a device without accessing the router settings?

Yes, if your provider provides a mobile app (eg. Rostelecom, Beeline, MTS). Most of these apps have a "My Devices" section where you can block a gadget with one click. Also, some routers (for example, Xiaomi) support control via voice assistants (Alice, Google Assistant).

The device continues to connect after being blocked by MAC. What should I do?

Most likely the device is using MAC address randomization (typical for iPhone with iOS 14+ and Android 10+). In this case:

1. Try locking your device by IP address through the firewall.
2. Use parental controls linked to the device name (if supported by the router).
3. Disable MAC randomization on the device itself (on iPhone: Settings → Wi-Fi → [i] next to network → Private Wi-Fi address → Turn off).

How to block internet access but leave access to the local network?

To do this you need to configure firewall on the router:

1. Find MAC address or IP address devices.
2. In the router settings, go to the section Security → Firewall.
3. Create a rule that blocks access to WAN (Internet), but allows LAN (local area network).
4. On Keenetic this is done through Traffic filtering rules with indication Destination interface: Internet and actions Drop.

After this, the device will be able to see other gadgets on your network (for example, a printer), but will not be able to access the Internet.

Will the device consume traffic if it is locked?

If the device completely disconnected from Wi-Fi (for example, after changing your password or blocking by MAC), it will not consume your data. However, if blocking is configured via parental control or firewall, the device can:

• Continue to connect to the network, but without Internet access (traffic is not consumed).
• Attempt to update data in the background (e.g. cloud backups), which may generate minimal local traffic.

To completely stop all data usage, disconnect your device from Wi-Fi manually or use guest network with speed limitation.

Is it possible to lock the device for a certain time (for example, at night)?

Yes, this function is called access schedule and is available in the section parental control most modern routers. For example, on ASUS:

1. Go to Adaptive QoS → Parental Control.
2. Select a device from the list.
3. Set time limits (e.g. 11:00 PM to 7:00 AM).
4. Save the settings.

On TP-Link a similar function is found in Advanced Settings → Access ControlIf your router doesn't support scheduling, use third-party solutions like OpenDNS or applications Google Family Link.